Gửi #239802: http://jimureport.com/ https://mvnrepository.com/artifact/org.jeecgframework.jimureport/jimureport-spring-boot-starter/1.6.1 jimureport <= 1.6.1 arbitrary file writethông tin

tiêu đềhttp://jimureport.com/ https://mvnrepository.com/artifact/org.jeecgframework.jimureport/jimureport-spring-boot-starter/1.6.1 jimureport <= 1.6.1 arbitrary file write
Mô tảJimureport has the function of remotely downloading files and writing them to the server, but the file name is not verified during the download and writing process, resulting in a special file name can be constructed to write arbitrary files, and an attacker can exploit this vulnerability to write SSH public key or write WAR packages to deploy Trojan files (when the application is deployed with Tomcat).
Nguồn⚠️ https://github.com/N0b1e6/exp/blob/main/README.md
Người dùng
 N0b1e6 (UID 42939)
Đệ trình17/11/2023 04:14 (cách đây 3 những năm)
Kiểm duyệt26/11/2023 16:08 (9 days later)
Trạng tháiđược chấp nhận
Mục VulDB246133 [jeecgboot JimuReport đến 1.6.1 /download/image imageUrl duyệt thư mục]
điểm19

Do you know our Splunk app?

Download it now for free!